v1.3.7

Sigil v1.3.7

Quick Install

Homebrew (macOS/Linux):

brew tap nomarj/tap
brew install sigil

npm (macOS/Linux):

npm install -g @nomarj/sigil

Cargo (Rust):

cargo install sigil-cli

Installer script:

curl -fsSLO https://www.sigilsec.ai/install.sh
sh install.sh

Manual Installation

macOS (Apple Silicon):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/sigil-macos-arm64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/SHA256SUMS.txt
shasum -a 256 -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-macos-arm64.tar.gz
sudo mv sigil /usr/local/bin/

macOS (Intel):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/sigil-macos-x64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/SHA256SUMS.txt
shasum -a 256 -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-macos-x64.tar.gz
sudo mv sigil /usr/local/bin/

Linux (x64):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/sigil-linux-x64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-linux-x64.tar.gz
sudo mv sigil /usr/local/bin/

Linux (ARM64):

curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/sigil-linux-arm64.tar.gz
curl -fsSLO https://github.com/NOMARJ/sigil/releases/download/v1.3.7/SHA256SUMS.txt
sha256sum -c --ignore-missing SHA256SUMS.txt
tar -xzf sigil-linux-arm64.tar.gz
sudo mv sigil /usr/local/bin/

Windows (x64):
Download sigil-windows-x64.zip, extract, and add to your PATH.

Verify checksums

# Linux
sha256sum -c --ignore-missing SHA256SUMS.txt
# macOS
shasum -a 256 -c --ignore-missing SHA256SUMS.txt

What's Changed

• style: satisfy rustfmt and ruff format after audit merge by @nomark-dev in #153
• docs: research note on what Sigil can adopt from Ghidra by @nomark-dev in #154
• Implement all seven Ghidra lessons and the four incidental defects by @nomark-dev in #155
• prism-scanner review: host residue, install-script links, 66 rules, dist/ and oversized-file scanning, grades, pip wrapper by @nomark-dev in #156
• Marketplace validation gate on PRs + website change monitoring queue by @nomark-dev in #158
• Precision, skills, speed, measurement and distribution: recall up at every threshold, zero clean-package CRITICAL verdicts by @nomark-dev in #157
• Recalibrate the HIGH verdict on measured distributions, and enforce version alignment in CI by @nomark-dev in #160
• fix(api): drop unimplemented SSO from the plan catalogue; date Shai-Hulud to 2025 by @nomark-dev in #159
• Correct the recalibration figures to the measured run by @nomark-dev in #161
• fix(api): point Enterprise enquiries at enterprise@sigilsec.ai by @nomark-dev in #163
• Precision: make the HIGH gate's two halves agree about secondary paths by @nomark-dev in #162
• Take the HIGH gate's density term over first-party score by @nomark-dev in #164
• Three correctness fixes: INSTALL-006's behaviour, a false module doc, and sigil diff across a version bump by @nomark-dev in #165
• Separate enforcement from the report label, and catch three from-import forms by @nomark-dev in #166
• Beat SkillSpector head-to-head: coverage, false positives, usability, customisation, enterprise by @nomark-dev in #167
• Close the remaining SkillSpector gaps and cut clean-MCP-server false positives by @nomark-dev in #168
• Cut clean-MCP-server false positives; correlation chains read names as values by @nomark-dev in #172
• Fix the invalid PyPI publish workflow and lint every workflow in CI by @nomark-dev in #173
• Release v1.3.7 by @nomark-dev in #174
• Record the v1.3.7 release benchmark by @nomark-dev in #175

Full Changelog: v1.3.6...v1.3.7